This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
File:                     3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft (raw, json)
Hash identifier:          JpaTsQ96H7CuUOOh4noLSu0qZRX1DtCOpIjsfZ2F75A=
Subject key identifier:   56:09:64:D8:52:1A:05:3F:F5:19:BC:C1:61:27:57:A1:9F:E4:46:1A
Authority key identifier: DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E
Certificate issuer:       /CN=A91C5727/serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
Manifest number:          45
Signing time:             Fri 23 Jan 2026 06:24:09 +0000
Manifest this update:     Fri 23 Jan 2026 06:24:08 +0000
Manifest next update:     Fri 30 Jan 2026 06:24:08 +0000
Files and hashes:         1: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl (hash: dRgWZ4sIgUBE0Qe/8dukY43hXmCkuCMoL8TZ1eGOHIA=)
                          2: 54338F04B19111F0A5C55920C4F9AE02.roa (hash: E8A0MxozIFUmVWJ+acYyHfG7aVRBN/Bhnpnj79WBN6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl
                          rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5727, serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
        Validity
            Not Before: Jan 23 06:24:08 2026 GMT
            Not After : Jan 30 06:24:08 2026 GMT
        Subject: CN=69731409-ac7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:22:f5:e4:c9:ae:98:aa:3f:e2:cc:04:40:
                    83:c6:4a:dd:49:77:94:32:9f:a8:4a:87:61:5a:d5:
                    5d:d7:2b:45:98:b7:b4:8c:5f:32:ae:63:e7:ae:07:
                    91:9a:43:ea:9c:66:8e:49:07:07:22:52:25:30:7a:
                    36:83:51:d6:a5:bc:1a:d4:a0:0a:79:fa:69:de:65:
                    9d:15:15:9b:35:1a:70:c3:c2:39:32:61:17:43:95:
                    52:a4:82:5b:7d:a8:ba:94:d8:fe:e2:c2:a4:8d:d8:
                    53:86:fb:1b:27:ca:cf:e9:0d:65:b3:ff:af:07:28:
                    4a:ee:ec:79:0e:a5:07:88:ba:f0:3c:a1:59:45:b3:
                    72:38:ee:98:bd:84:46:9c:e5:3e:aa:49:31:65:45:
                    18:0d:74:c7:b1:3f:0c:fa:92:dc:ed:23:5d:0f:b4:
                    a1:82:e1:1b:c0:ec:4a:c6:9c:b6:91:87:31:ab:6d:
                    15:66:50:e3:4f:49:38:ba:f9:b3:c7:5b:d3:79:db:
                    cf:0a:bb:91:ac:f9:b0:67:cb:53:9c:bb:ed:97:92:
                    80:9d:f7:68:e9:a9:ff:8c:b6:a3:bb:42:47:12:a6:
                    91:43:eb:33:be:19:af:40:11:3e:64:25:07:71:2e:
                    1c:74:bb:ef:6f:d6:56:fc:d5:89:08:db:1f:bf:44:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:64:D8:52:1A:05:3F:F5:19:BC:C1:61:27:57:A1:9F:E4:46:1A
            X509v3 Authority Key Identifier:
                keyid:DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:1f:9c:4a:39:e7:c6:26:4c:d8:7b:e8:2b:7a:a7:ae:06:84:
         67:47:b4:68:1d:e1:fb:44:1c:ab:09:92:50:90:ee:15:6d:ab:
         64:9a:5d:52:74:57:bd:c3:e6:c1:fb:da:fb:f6:8e:b3:b7:0c:
         c7:08:cf:74:39:97:d6:1a:7b:99:b2:e1:f7:40:c2:f1:8e:f0:
         3a:14:6f:01:db:c5:2d:34:53:1e:39:07:0a:5e:7a:9f:9f:2c:
         09:fe:89:fa:c7:72:06:34:44:ca:7d:c0:f2:f2:17:a6:05:70:
         ea:7d:03:d6:de:66:80:3d:01:25:ca:af:4f:f2:0a:57:ba:fb:
         7d:fb:cc:e2:0c:cc:8b:61:f2:15:ab:03:bd:4d:f8:f6:d5:aa:
         2b:26:ca:d2:54:d1:ec:9f:66:58:d5:78:e7:7b:40:b2:c8:73:
         24:3f:e5:4d:80:9c:e5:f0:81:cd:93:9f:df:1a:74:18:59:ac:
         39:b2:05:76:af:2f:49:d4:34:44:a9:70:61:eb:ea:57:08:7a:
         87:45:ce:5d:bc:39:14:1e:a7:7a:54:2c:b3:35:62:27:93:87:
         f3:76:a3:79:98:d4:d8:a4:30:23:c1:69:e5:c6:8d:73:b3:a0:
         99:67:cc:6f:1d:42:ae:94:00:dd:42:5b:da:8d:97:f1:ec:65:
         0f:82:fc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:29 2026 by rpki-client